Blue Screen of Death Windows 7 – KB2823324

Posted on April 12th, 2013

Microsoft is investigating behaviour where systems may not recover from a restart, or applications cannot load, after security update 2823324 is applied.

We recommend that you uninstall this update. As an added precaution, Microsoft has removed update while they investigate the problem.

Examples of symptoms

Language

Error message text

Any The System Event log shows the following event ID:

Event Type: Error
Event Source: Ntfs
Event Category: Disk
Event ID: 55
Date: Date
Time: Time
User: N/A
Computer: Computer_name
Description:
The file system structure on the disk is corrupt and unusable. Please run the Chkdsk utility on the volume E:..

Note The volume letter may vary. Chkdsk will run but will not find any issues to fix.

Any STOP: c000021a {Fatal System Error}
The Session Manager Initialization system process terminated unexpectedly with a status of 0xC000003a (0x00000000 0x00000000).
The system has shutdown.

Note The status will always be 0xC000003a if you are experiencing the issue described here.

English Windows failed to start. A Recent hardware or software change might be the cause. To fix the problem, To do this, follow these steps:

1. Insert your windows installation disc and restart your computer.
2. Choose your language settings, and then click next.
3. Click “Repair your computer.”

Status: 0xc000000e
Info: The boot selection failed because a required device is inaccessible.

   

This failure occurs very early in the startup process, and no Memory.dmp file is created.

After you install security update 2823324, Kaspersky Anti-Virus for Windows Workstations or Kaspersky Anti-Virus for Windows Servers versions 6.0.4.1424 and 6.0.4.1611 may display an error message that resembles the following:

Your license is not valid.
Therefore, some or all of Kaspersky protection components stop functioning.

What Do I do next?

Microsoft is researching this problem and will post more information in this article when the information becomes available. This includes issuing a new update that resolves the issues discussed in this article.

We recommend that customers uninstall update 2823324, which is provided in Microsoft Security bulletin MS13-036. This article provides multiple methods to uninstall the update.
Recovery steps for computers that have installed security update 2823324 but have not yet restarted

For computers that have security update 2823324 installed but have not yet restarted, follow the steps in Microsoft Knowledge Base article 927392 to uninstall the hotfix by using the command line syntax that is described in the article.
Option 1: Manually uninstall the Security Update

  1. In Control Panel, open Programs, and then click View Installed updates.
  2. Select Security Update for Microsoft Windows (KB2823324), and then click Uninstall to uninstall the security update.

 

Scenario B: Recovery steps for computers that have installed security update 2823324 and are now failing to start

Option 1: Recover the last Restore Point

  1. Restart by using the F8 key.
  2. Select Repair your Computer.
  3. Select the language, and then log on to the computer.

    Note If you do not know the local password, you must start by using a Windows 7 DVD or USB bootable media. Then, access System Recovery Options.

  4. Select System Restore from the menu:

System Restore
image-4617

  1. Restore the last restore point. This uninstalls security update 2823324.
  2. Restart the computer into normal mode.

This only applies on the below operating systems.

  • Windows 7 Service Pack 1, when used with:
    • Windows 7 Enterprise
    • Windows 7 Professional
    • Windows 7 Ultimate
    • Windows 7 Home Premium
    • Windows 7 Home Basic
  • Windows 7 Enterprise
  • Windows 7 Professional
  • Windows 7 Ultimate
  • Windows 7 Home Premium
  • Windows 7 Home Basic
  • Windows Server 2008 R2 Service Pack 1, when used with:
    • Windows Server 2008 R2 Standard
    • Windows Server 2008 R2 Enterprise
    • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 R2 Standard
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 Service Pack 2, when used with:
    • Windows Server 2008 for Itanium-Based Systems
    • Windows Server 2008 Datacenter
    • Windows Server 2008 Enterprise
    • Windows Server 2008 Standard
    • Windows Web Server 2008

More information can be found at http://support.microsoft.com/kb/2839011